Exam Sim Questions

Question 1

You want to ensure that the sender of the message or network transmission is authenticated, and not an imposter or a phishing attempt. What method provides the highest level of origin authentication?

Answer 1

AES-CCMP (Advanced Encryption Standard)(Counter Mode with Cypher Block Chaining Media Access Control Protocol)

Question 2

You use a computer on a TCP/IP network to transfer data through well-known TCP port 80. Which protocol is most likely being used to transfer data?

Answer 2

HTTP (Hypertext Transfer Protocol)

Question 3

Computer A needs the IP address of Computer B, but Computer A only knows Computer B’s FQDN. Where is this information found?

Answer 3

Forward Zone [FQDN = Fully Qualified Domain Name]

Question 4

Which attack directs user traffic to a malicious web site without any outside communication from an attacker?

Answer 4

DNS poisoning

Question 5

You are documenting the network layout for your company. You have discovered a firewall that has two network interfaces. Which firewall architecture have you discovered?

Answer 5

dual-homed firewall

Question 6

You are the network administrator for a healthcare organisation. Recently several federal and state government laws hav been enacted which will affect network operations. Which change management documentation should record this information?

Answer 6

Regulations

Question 7

Your company needs to be able to provide employees access to a suite of application. However, you do not want the employees to install a local copy of the applications. What method should you use to deploy the suite of applications?

Answer 7

SaaS (Software as a Service)

Question 8

You are concerned about malware and workstation security, and you do not want users to use USB flash drives to export or import files. You also have no need for Telnet or FTP services. What should you do to increase security on your systems?

Answer 8

• Disable device ports
• Disable unnecessary services

Question 9

What should a business with a main office downtown use to communicate with various offices in nearby suburban locations?

Answer 9

MAN (Metropolitan Area Network)

Question 10

You just installed a replacement switch that was moved from one part of the network to a new location. After all the patch cables are reconnected, some users cannot communicate via email. What is the issue?

Answer 10

VLAN mismatch

Question 11

You are troubleshooting a workstation that is not communicating with the network. You try a different port within the wiring closet hub, and this seems to fix the problem. What should you do next?

Answer 11

Connect to the network and try to transfer a file

Question 12

You have been hired as a consultant for the medium-sized business. As part of your duties, you need to make recommendations on changes to the network. You decide that you want to install agents on the network devices to monitor network traffic and record the behaviour of network components. You will then use the statistical data that is gathered to make your recommendations. Which standard should you deploy?

Answer 12

SNMP (Simple Network Management Protocol)

Question 13

For a new office space, you have been asked to choose a best cost solution for providing wireless network access for up to 60 employees. Your boss has informed you that there will be a mix of 802.11n and 802.11ac devices in use. The maximum distance from WAP to any user is 150ft (46M). Which kind of wireless access point should you buy?

Answer 13

802.1n the maximum indoor range is 230ft (70m) where as 802.11ac is only 115ft (35M)

Question 14

Prior to deploying a new wireless access point at a retail store that is located in a strip mall, you decide to perform a site survey. What is the purpose of doing this?

Answer 14

• to calculate the number of access points required for the coverage area
• to find the frequency and power settings to be used on access points

Question 15

You need to deploy 802.1x authentication that supports client-side digital certificates for authentication with access points. Which technology should you deploy?

Answer 15

EAP-TLS (Extensible Authentication Protocol with Transport Layer Security)

Question 16

You install a second NIC in your Linux computer. Then you log on to the computer as root. You want to configure the new NIC with the IP address 192.168.0.1 and the subnet mask 255.255.255.0 . What command should you issue at a command prompt to configure the NIC?

Answer 16

ifconfig eth1 192.168.0.1 netmask 255.255.255.0 up

Question 17

Which statement is true of a network based intrusion detection system? (NIDS).
a) an NIDS generate a finite number of alarms
b) An NIDS does not analyse realtime information
c) a NIDS cannot detect an intruder who is logged on to a host computer
d) an NIDS is active while gathering data over the network

Answer 17

c) a NIDS cannot detect an intruder who is logged on to a host computer

Question 18

You have been hired as a network administrator for a large corporation. This network includes a large number of switches that must be identically configured. In the past this information has been configured manually. You want to automatically propagate the VLAN information to all switches on the LAN. What should you use?

Answer 18

802.1q VTP
To automatically propagate VLAN information to all switches on the LAN you should use VLAN Trunking Protocol (VTP) which is also referred to as 802.1q.

Question 19

You have decided to implement ISAKMP. What is provided by this technology?

Answer 19

A protocol that works with IPSec to establish a secure session.
Internet Security Association and Key Management Protocol (ISAKMP)

Question 20

What attack involves the use of multiple computers with the purpose of denying legitimate access to a critical server?

Answer 20

distributed denial-of-service (DDOS) attack

Question 21

Your company is building a new facility, and you are tasked with designing the new network at that site. You will need multiple servers, switches, patch panels, UPS equipment and other equipment. You need to plan and document the placement of the equipment in the site’s network data centre. Which tool should you use?

Answer 21

Rack Diagrams - rack diagrams depict the placement of network equipment such as: routers, switches, hubs, patch panels, servers and more in a standard 19” wide cabinet called a rack

Question 22

You have implemented an Ethernet CSMA/CD network for your company. Users complain of delays. When you research the issues, you discover that the network has low throughput. What is the most likely cause of delay on this network?

Answer 22

Collisions - an excessively high number of collisions occurring for a sustained length of time can cause delays and slow throughput. CSMA/CD will negotiate standoff timers to allow multiple devices to communicate on congested network segments

Question 23

Your company is deploying a VoIP system on its premises at three locations. The internal VoIP system must communicate with the existing PSTN network. Which device will be necessary to permit network-based calls to access the PSTN, and for PSTN-based calls to access the network?

Answer 23

VoIP-PSTN gateway -These devices establish the routing of calls to the existing PSTN network

Question 24

You administer your company’s network, which is connected to the internet. A firewall is configured between the company network and the internet. You want to prevent users on the internet from using HTTP to connect to computers on the company network. Which well-known TCP port should you block to prevent internet users from entering the company’s network on that port?

Answer 24

80 TCP

Question 25

Workstation A4 and A5 were recently added to the network. Since the clients have been added, the network has been running very slowly. Which two conditions could be causing the problem?

Answer 25

• A connector is loose
• The bus network might be missing a terminator

Question 26

You are explaining the function of a multi-layer switch to several junior administrators. On which data can multi-layer switches make routing decisions?

Answer 26

• Port number
• IP address
• MAC address
• Protocol
  A multi-layer switch operates at Layers 2, 3, 4 of OSI model

Question 27

You have reconfigured your network to change the cable type used on one of your subnets from Cat5 to Cat6. Which change configuration management documentation should you revise?

Answer 27

-Network Baseline
- Physical Network Diagram

Question 28

You have been handed a document that details the steps to take to update the network drivers. What type of change management document do you have?

Answer 28

Procedures

Question 29

Which DSL technology provides the highest data rate?
a) SDSL
b) HDSL
c) ADSL
d) VDSL

Answer 29

Very high data rate Digital Subscriber Line (VDSL) provides the highest data rate at 51 to 55 megabits per second over cable lengths of up to 1000ft or 300 metres

Question 30

An employee shows you a web site that publishes the SSIDs and passwords for private wireless networks in your area. The information on your company’s wireless network is included. Of which type of attack is this an example?

Answer 30

War Chalking. Originally occurred when hackers wrote SSID and security information on the side of buildings. This attack has steadily evolved to the point where hackers are now publishing this information on websites

Question 31

You have been hired as the network administrator. The company’s network consists of several subnetworks located in various locations across the southeast United States. You want to deploy switches across the different locations so that you can implement virtual local area networks (VLANs). What is the primary benefit of this implementation?

Answer 31

Users can be grouped by their work functions, by shared applications or protocols, or by department, regardless of their geographical location

Question 32

A user is complaining about wireless connectivity. Their cubicle is on a concrete wall, and the wireless access point in mounted on the other side of the wall. What describes what is happening to the wireless signal that only has to travel a few inches?

Answer 32

Absorption - occurs when an object does not reflect or refract a wireless signal, but rather absorbs a portion of it. Different materials have different absorption rates, concrete high, drywall low

Question 33

Users are unable to log in to the network. When you examine the authentication server, you see that CPU usage is almost 100%. What is most likely the issue?

Answer 33

Unresponsive Service

Question 34

Which wireless topology only requires one access point to be physically connected to the wired network, while still offering maximum flexibility and redundancy?

Answer 34

Mesh - A mesh topology in wireless networks only requires one access point to be physically connected to the wired network where as in a traditional wireless network each access point must be physically connected to the wired network

Question 35

You are setting up a 10-Mbps SOHO network at a residence. What is the lowest category or level of UTP cable that you should use as transmission medium for small LAN communication in the 10-Mbps range?

Answer 35

Category 3 - Although you could use Category 3 or Category 5 cable for the LAN, Category 3 is the lowest category cable that you could use for the LAN.

Question 36

Your company has recently leased the office next door to the one currently being used. Both offices will be used. The current office has a Cat 6 network installed. The new office has a fibre network installed. You need to connect the networks of the two offices. Which device should you use?

Answer 36

Media Converter - Media converters work on the Physical layer of the OSI model

Question 37

You are deploying a virtual private network (VPN) for remote users. You want to meet the following goals:
- The VPN gateway should require the use of Internet Protocol Security (IPSec)
- All remote users must use IPSec to connect to the VPN gateway
- No internal hosts should use IPSec
Which IPSec mode should you use?

Answer 37

host-to-gateway - in this configuration, the VPN gateway requires the use of IPSec for all remote clients

Question 38

You have replaced all of the routers on your network with switches. You then decide to turn off CSMA/CD. What is the result of your actions?

Answer 38

Network device will now operate in full-duplex mode

Question 39

You are the network administrator for an organisation whose network uses the Open Shortest Path First (OSPF) routing protocol. Which metric does this protocol use for optimal path calculation?

Answer 39

Cost - OSPF is a link-state routing protocol which uses cost as a metric for optimal path calculation. It is an open standard protocol based on Dijkstra’s Shortest Path First (SPF) algorithm.

Question 40

You need to copy the traffic from a single port to a different port, but prevent bidirectional traffic on the port. Which switch feature should you use?

Answer 40

Port Mirroring - Copies traffic from a single port to a different mirror port, but prevents bidirectional traffic on the port. It allows you to view all of the traffic for a single VLAN, no matter the switch where the traffic originates. Local port mirroring only uses ports from the same switch. Remote port mirroring uses ports from multiple switches.

Question 41

Which mitigation technique reduces the attack profile of a device or network?

Answer 41

Role Separation - involves dividing server duties amongst two or more servers to reduce an attack profile.

Question 42

An employee has just relocated to the New York office, after working in Paris for the past five years. Both offices use DHCP to issue IP addresses. She brought her company laptop with her. The laptop was issued in Paris. As she is settling into the new office, she is not able to connect to the network. What is the most likely cause of her problem?

Answer 42

Duplicate MAC addresses - can be caused by MAC address spoofing or by manufacturers reusing MAC addresses in their devices. Manufacturers will often ship NICs with duplicate MAC addresses to different geographic areas

Question 43

The network administrator has changed the IP address of several servers on the network. Now a user named Jim is unable to connect to file shares on those servers using the computer name. You need to run the appropriate command(s) on Jim’s computer to resolve the problem

Answer 43

ipconfig /flushdns - All you need to do is flush the contents of the clients computers DNS cache

Question 44

Which action would you perform to look for candidates for exploitation across an information system?

Answer 44

Vulnerability Scanning - looks for areas that are candidates for exploitation (weak spots) in networks, operating systems, applications and equipment. Vulnerability scans can also identify the effectiveness of in-place systems designed to prevent those exploits

Question 45

A customer has asked you to deploy a solution based on port numbers that allows multiple computers to share a single IP address. Which addressing technology should you deploy?

Answer 45

PAT - Port Address Translation provides port address translation. When using PAT you are able to share a single public IP address among multiple computers on the same network

Question 46

Which component of a computer use policy should state that the data stored on a company computer is not guaranteed to remain confidential?

Answer 46

No exception of privacy policy

Question 47

A company procedure calls for using IPv4 and IPv6 loopback addresses as part of the troubleshooting process. What is the purpose of this tool?

Answer 47

To provide an IP address for testing the local IP stack without a physical network connection

Question 48

A user reports that she cannot print from her computer. You also notice that they are unable to reach a supplier’s website. The operating system is Windows 8.1. Which command should you start with to help with your diagnosis?

Answer 48

ping - allows you to test the connection between a local computer and a node on the network.

Question 49

A suburban office location for your company is located next door to a regional airport, where a US government regional weather radar system is also housed. You are tasked with setting up a wireless 802.11ac network in that location. You must select a range of 80MHz channels, some devices on that network have 802.11n wireless interfaces. Which channels should you choose?

Answer 49

Channels 36-48, Channels 149-161 - all 802.11n and 802.11ac client devices support use on these two bands. Channels 52-64 reserved for weather radar systems. Channels 100-144 also government weather radar systems and do not work with older 802.11n client devices. Channel 165 is only 20MHz wide.

Question 50

You need to deploy a fibre distribution panel for datacenter, remote office, or local area network use. Which of the following are NOT important for such uses?
a) Support for SFP+
b) Bulkhead adapters and receptacles
c) Cable Storage
d) Cable Splices
e) Support for GBIC connectors
f) Cable termination

Answer 50

a) Support for SFP+ and e) Support for GBIC connectors

Question 51

Technicians have recently reported to you that the type of lighting in your company’s building can affect the network communication. What type of lighting is in the building?

Answer 51

Fluorescent lighting fixtures - emit high levels of EMI

Question 52

Which connection type allows for connections of up to 44.736Mbps?

Answer 52

T3 - The T-carrier system and E-carrier system offer several different levels of connections:
T1 = 1.544Mbps, 650ft, UTP/STP/Coaxial
T3 = 44.736Mbps, 450 ft, Coaxial
E1 = 2.048Mbps, 650ft, UTP/STP/Coaxial
E3 = 34.368Mbps, 450 ft, Coaxial

Question 53

What is typically used to conceal the nature of a social engineering attack?

Answer 53

Believable language

Question 54

While troubleshooting a network outage on a 10GBase-SW network, a technician finds a 500m fibre cable with a small service loop and suspects it might be the cause of the outage. What is most likely the issue?

Answer 54

Maximum cable length exceeded - On a 10GBase-SW network the maximum cable length is 300m

Question 55

As a network administrator you decide to replace a hub on your network with an active hub. At which OSI layer does the new device function?

Answer 55

Physical - Active hubs or multiport repeaters amplify or regenerate signals to all other ports on the hub

Question 56

Which suppression methods are recommended for a fire in a facility that involves paper, laminates, and wooden furniture?

Answer 56

Soda Acid, Water - Soda acid removed the fuel while water reduced the temperature this combination are used to extinguish class A fires

Question 57

Which type of intrusion detection system (IDS) relies upon a database that contains the identities of possible attacks?

Answer 57

signature-based IDS - watches for intrusions that match a known identity or signature, must be updated to remain effective

Question 58

You have been hired as a contractor to implement a small office home office (SOHO) network for a small business. While gathering the requirements and constraints regarding the network, you decide to implement two subnets on the network. What are the reasons for implementing subnets on an IP network?

Answer 58

• to reduce congestion by decreasing network traffic
• to increase network security
• to expand the network
• to reduce CPU use
• to isolate network problems

Question 59

You are designing a network for a new facility. The client wishes to provide main connection to several floors from where the ISP service enters the building. On each floor switches will handle the distribution to end devices. What would be the most helpful for maintaining and documenting those main connections?

Answer 59

IDF/MDF documentation - Intermediate Distribution Frame/Main Distribution Frame documentation first describes and details the primary ISP feed into the building, which is handled by the MDF. IDF/MDF Documentation also shows how the MDF splits out and feeds the various IDFs throughout the facility.

Question 60

You are investigation possible unauthorised access to a Windows Server 2008 computer. The first step in your company’s investigation policy states that the current network connections must be documented. Which command should you use?

Answer 60

netstat - displays incoming and outgoing connections, routing tables and network interface statistics.

Question 61

Which of the following can use RFID to identify the location of the object?
a) Key Fobs
b) Biometrics
c) Locks
d) Asset tags

Answer 61

d) Asset tags - also referred to as asset tracking tags can be labels with barcodes or QR codes, or can include radio frequency identification (RFID) chips that provide electronic tracking.

Question 62

Which media-access method does the 802.11 standard specify for wireless networks?

Answer 62

CSMA/CA - Carrier Sense Multiple Access/Collision Avoidance

Question 63

You have installed a new MAU on your Token Ring network because the old one is no longer supported by the product vendor. At what layer of the OSI model does this device operate?

Answer 63

The Physical Layer - A Multistation Access Unit (MAU) is a network connection concentrator used on Token Ring networks. Similar to a hub

Question 64

You need to obtain the current protocol statistics and port connections for Windows and UNIX/Linux computers. Which tool should you use?

Answer 64

netstat - Netstat is a TCP/IP utility that you can use to determine the computer’s inbound and outbound TCP/IP connections. It displays current connections and their listening ports

Question 65

You have decided to implement a firewall between your company’s network and the internet. What does a firewall software solution typically provide?

Answer 65

• IP proxy services
• Packet Filtering
• HTTP proxy services

Question 66

You are the network administrator for a corporate network that includes a DNS server, a DHCP server, a file/print server, and a wireless subnet. Computers on the wireless subnet are having trouble connecting to internal resources and to the internet. Upon troubleshooting the problem you discover that some of the wireless computers can only access resources on other wireless computers. However, some of the wireless computers can access internal resources and the internet. What is causing this?

Answer 66

The computers are configured to operate in ad hoc mode.

Question 67

You are analysing communication over your network. You have captured all the packets sent to and from a server on your network. You need to filter the packet capture to only IMAP4 protocol communications. Which port does this protocol use?

Answer 67

TCP port 143 - Internet Message Access Protocol is an internet protocol for e-mail retrieval. IMAP4 works at the application layer of the OSI model

Question 68

your company needs to deploy a wireless network to allow users to connect to the network using mobile devices. You are concerned that the radio signal will not cover the amount of area you need. Another technician instructs you to research the angle of radiation of the wireless access point’s antenna. Which term is used to refer to this?

Answer 68

Beamwidth

Question 69

You use a computer named Wkst1 on a TCP/IP network which is installed with an application that uses UDP to send a file from your computer to a computer named Wkst2. Data collisions occur and several data packets are lost during transmission. What will most likely occur as a result of losing packets during transmission?

Answer 69

The protocol will drop the packets, The application will automatically retransmit the packets when it detects UDP has dropped packets

Question 70

What technology implements packet tagging in a LAN?

Answer 70

CoS - Class of Service implements packet tagging in a local area network. It tags the different types of traffic, such as video streaming or VoIP. the tag is a value between 0 and 8, with 0 being the highest priority

Question 71

What is the purpose of a pointer (PTR) DNS record?

Answer 71

It maps an hostname to an IP address

Question 72

Which option is a critical metric in preventive maintenance that would allow you to schedule the replacement of a component at a convenient time, as opposed to waiting for the component to fail at an inopportune time?

Answer 72

MTBF - Mean Time Between Failures is the average, or mean time between failures on a device or system. It is an expression of reliability

Question 73

You need to implement Spanning Tree Protocol to prevent network loops when more than one path can be used. Which two devices could you deploy?

Answer 73

Switches, Bridges - use STP to prevent loops in the network. STP uses Spanning Tree Algorithm (STA) to help a switch or a bridge by allowing only one active path at a time.

Question 74

Which RADIUS implementation was created to deal with Voice over IP(VoIP) and wireless services?

Answer 74

Diameter was created to deal with VoIP and wireless services. It was created to address new technologies that RADIUS was not deigned to handle.

Question 75

While designing your network architecture, you decide to configure multiple VLANs to a router within your network. You are aware that having multiple VLANs on a single router will not be feasible to manage. What should you do to help mitigate this problem?

Answer 75

Implement sub-interfaces on your routers. Sub-interfaces are used to help manage multiple VLANs within a router and facilitate intercommunication with each other. A sub-interface can be configured virtually on a router or switch so that each device connected to a VLAN appears under the same IP address, causing the IP address to act as a default gateway

Question 76

To improve security you change your Web server named Web1 to the HTTPS protocol. Shortly after implementing the change users report that they cannot access any web sites hosted by Web1 by using their fully qualified domain names (FQDNs). however they can access other web sites that are hosted on other web servers by using their FQDNs. What is causing this problem?

Answer 76

The new web address starts with https instead of http, users are most likely attempting to access via http:// instead of https://

Question 77

You want to enable port authentication on your network switches. On which setting is port authentication based?

Answer 77

MAC address - Port authentication on your network switches is based on the switch’s MAC address. If the switch is not specifically configured with a MAC address, the MAC address communication is not allowed through the switch port

Question 78

The network administrator has changed the IP address of several servers on the network. Now a user named Jim is unable to connect to file shares on those servers using the computer name. You need to run the appropriate command(s) on Jim’s computer to resolve the problem

Answer 78

ipconfig /flushdns - all you need to do is flush the contents of the client computer’s DNS cache

Question 79

Your Windows 7 computer is located on a TCP/IP network that uses DHCP. You want your computer to release its lease on the TCP/IP configuration that it received from the DHCP server. Which command should you issue to release the configurations?

Answer 79

The ipconfig command with /release to release your computer’s lease on the TCP/IP configuration that it received from the DHCP server. If other computers cannot locate your computer on the network then you might need to renew the DHCP lease for your TCP/IP configuration which would use /renew

Question 80

Which protocol is NOT capable of preventing a man-in-the-middle attack? HTTPS, SSH, rsh, IPSec?

Answer 80

rsh - Remote Shell protocol is used to log onto remote computers and can be easily exploited by a man-in-the-middle attack (MITM) because it neither provides encryption nor authentication of data

Question 81

Your company has decided to implement an acceptable use policy (AUP) that must be distributed to all users. You have been asked to write the preliminary policy to submit for management approval. What is defined in this policy?

Answer 81

How users are allowed to employ company hardware

Question 82

Which protocol is categorised as an Exterior Gateway Protocol (EGP)?

Answer 82

BGP - Border Gateway Protocol is used between autonomous networks. BGP is an algorithm to determine the quickest route between networks

Question 83

What provides both authentication and authorisation using UDP?

Answer 83

RADIUS - Remote Authentication Dial-in Service was originally designed for dial-up networking and validates the credentials of a remote user against a stored database

Question 84

You have reconfigured your network to change the cable type used on one of your subnets from cat5 to cat6. Which change configuration management documentation should you revise?

Answer 84

Physical Network Diagram, Network Baseline

Question 85

Which type of network would be set up in an office for computers and mobile devices that do NOT comply with the company’s NAC policies?

Answer 85

Quarantine network - A NAC server would hold the policies that would control access to the network. If computers or mobile devices did not have the appropriate security controls configured, they would be placed on the quarantine network to isolate them

Question 86

Which is NOT associated with data conversion between the ISP and the customer premises equipment? ATM, Demarcation point, CSU/DSU, Smart Jack?

Answer 86

Asynchronous Transfer Mode (ATM) is NOT associated with data conversion between the ISP and the customer premises equipment. It is a network transmission model used in voice, video and data communications. ATM uses equally sized cells that are all 53 bytes long. The equal length of the data packets supports very high data rates. ATM is deployed in Optical Carrier (OC) backbone network segments

Question 87

You are troubleshooting a problem in which several users have called the help desk to report problems connecting to parts of the WAN. They were able to access the entire WAN earlier in the day, but when they returned from their lunch breaks they were not able to access parts of the WAN. You have been able to gather information about the problem, duplicate the problem, question the users and adequately establish the symptoms of the problem. What should you do next?

Answer 87

Establish what has changed -

Question 88

Which of the following options are relevant to network segmentation when using switches? Tagging and untagging ports, Mac address tables, VLANs, ARP tables?

Answer 88

Tagging and untagging ports, VLANs - VLANs allow you to segment a network and isolate traffic to different segments. VLANs are created by tagging and untagging ports on a switch

Question 89

Currently your company uses IPv4 across its enterprise. Your company is considering using IPv6 instead of IPv4. Which improvements does IPv6 provide over IPv4?

Answer 89

The IP header options allows more efficient forwarding and less rigid length limits, Some header fields have been dropped or made optional

Question 90

You are setting up your company’s VoIP infrastructure. One remote office location has audio problems when placing or receiving calls. At times, speech quality is poor, or there is a noticeable and distinct echo for call audio. In troubleshooting a possible system configuration issue, which possibilities do you want to eliminate first?

Answer 90

The call terminates on an analog endpoint - If one call terminates on an analog endpoint, occasional audio problems are inevitable

Question 91

You have been hired as a contractor to implement a small office home office (SOHO) network for a small business. While gathering the requirements and constraints regarding the network you decide to implement two subnets on the network. What are valid reasons for implementing subnets on an IP network?

Answer 91

To increase network security, To reduce congestion by decreasing network traffic

Question 92

A company procedure calls for using the IPv4 and IPv6 loopback addresses as part of the troubleshooting process. Which explanation best represents the purpose of this tool?

Answer 92

To provide an IP address for testing the local IP stack without a physical network connection

Question 93

You a re a network administrator for a company that maintains LANs in Los Angeles and Paris. You want to use PPTP to create a VPN connection between the LAN in Paris and the LAN in Los Angeles. A PPTP server has been configured on each LAN. Which protocol should you use to establish a connection between the PPTP servers?

Answer 93

PPP - Point-to-Point Protocol should be used to establish a connection between the Point-to-Point Tunneling Protocol (PPTP) server in Las Angeles and the PPTP server in Paris

Question 94

You have recently been hired by a company as its network administrator. Currently, all service packs and security updates are deployed directly to the computers and applications that need them. Last month this resulted in a server outage of four hours because of a bug in a security update. Management wants to prevent issues with any future updates. You need to recommend a solution to this problem. What recommendation should you make?

Answer 94

Deploy a test lab - all service packs and other updates will be deployed in the test lab first. If they do not cause any issues you can then deploy the service packs or updates in the live environment

Question 95

Which device or feature provides a bridge between the physical environment and the virtual environment?

Answer 95

Virtual NIC - In common practice it is bridged to the physical NIC on the host system so the virtual machine can communicate with another network segment or the internet

Question 96

Which suppression methods are recommended for a fire in a facility that involves paper, laminates and wooden furniture?

Answer 96

Soda acid, Water -Soda acid removes the fuel while water reduces the temperature.

Question 97

Management has asked you to ensure that any traffic through the external firewall is allowed as long as it is the result of a previous connection. Which type of firewall performs this assessment when it first encounters traffic?

Answer 97

stateful firewall - When traffic is encountered a stateful firewall first examines a packet to see if it is the result of a previous connection. Information about previous connections is maintained in the state table

Question 98

You are a system administrator. A user calls you complaining that he cannot log on to the network. What are two questions you should ask first when troubleshooting the problem?

Answer 98

Are other users also experiencing the same problem? - you will know if this is a network problem or a problem with the user’s logon process. Can the problem be duplicated? - If the problem cannot be duplicated it could be an intermittent problem or it could be something simple such as the user typing his password incorrectly

Question 99

You connect a home computer to a BRI ISDN line. The Bandwidth On Demand Interoperability Group (BONDING) protocol is used to combine the channels. What is the maximum data transfer rate of the B channels?

Answer 99

128Kbps - Each B channel in a Basic Rate Interface (BRI) Integrated Services Digital Network (ISDN) can provide a maximum data transfer rate of 64Kbps. A BRI ISDN line provides two bearer (B) channels which can be combined by the bonding protocol

Question 100

Your company’s networking team wants to deploy 10-Gigabit Ethernet (10GbE) over fibre optic cables for its core or backbone network segments. Which types of transceivers are they most likely to plug directly into their switches, routers and server network adapters?

Answer 100

SFP+ (Small Form-factor Pluggable Plus) - As data rates increase to 10Gbps and beyond networks make increasing use of fibre optic cables to convey the signals necessary to encode and transport the huge volumes of information involved.

Question 101

What is the advantage of using wireless bridges over E1/T1 leased lines?

Answer 101

Wireless bridges support higher bandwidth than E1/T1 - E1/T1 lines tend to be more expensive in the long term. Wireless bridges provide connectivity between two geographically separated LANs.

Question 102

Your company is located in Charlotte, North Carolina. Management has decided to deploy multiple 802.11a WLANs. You are concerned that there are not enough non-overlapping channels to support the number of access points that you need to deploy. How many non-overlapping channels are supported in this deployment?

Answer 102

twenty-three - Each 802.11a channel utilises a RF bandwidth of 20MHz in Orthogonal Frequency Division Multiplexing (OFDM) modulation. This 20 MHz channel is split into 52 channels with 300KHz smaller sub-carriers, out of which 48 are used for data transmission. The eight non-overlapping channels can be used in a single area or cell to provide the cell a total bandwidth up to 532Mbps

Question 103

You install a network analyser to capture your network’s traffic as part of your company’s security policy. Later you examine the captured packets and discover that the only packets that were captured are from Subnet 1. You need to capture packets from all 4 subnets on your network. Two routers are used on your network. What could you do? (2 answers)

Answer 103

Install a distributed network analyser, Install the network analyser on all four subnets

Question 104

You are designing a network for a new facility. The client wishes to provide main connections to several floors from where the ISP service enters the building. On each floor, switches will handle the distribution to end devices. What would be the most helpful for maintaining and documenting those main connections?

Answer 104

IDF/MDF documentation - Intermediate Distribution Frame/Main Distribution Frame documentation first describes and details the primary ISP feed into the building which is handled by the MDF. The documentation also shows how the MDF splits out and feeds the various IDFs throughout the facility. Most often an IDF will provide network service to a floor or department

Question 105

You have been hired as a network security consultant. The company that hires you had multiple incidents where their wireless network has been breached by hackers. You find out that they have a RADIUS authentication server that they use for the corporate VPN. You decide to recommend using RADIUS authentication for the wireless network. Which WPA version should you suggest?

Answer 105

WPA-Enterprise - requires the use of a RADIUS authentication server and is intended for large networks. Also referred to as WPA-802.1x

Question 106

Your company wants to implement a WLAN. You are researching the different wireless options and want to implements the WLAN technologies that are least affected by multipath distortion. Which WLAN transmission technologies are least affected by multipath distortion?

Answer 106

802.11g & 802.11a - Multipath distortion is caused by the reflection of radio frequency (RF) signal on surfaces while traveling between transmitter and the receiver. Also known as inter-symbol interference

Question 107

Which term is most commonly used to describe equipment that creates a demilitarised zone (DMZ)?

Answer 107

firewall - A DMZ is a zone located between a company’s internal network and the Internet that usually contains servers that the public will be accessing. Usually two firewalls are used to create a DMZ. One firewall resides between the public network and DMZ and another firewall resides between the DMZ and private network.

Question 108

You have been asked to implement a Voice over Internet Protocol (VoIP) on your company’s network. Which protocol should you use?

Answer 108

SIP - Session Initiation Protocol is an Applications layer protocol, Real-time Transport Protocol (RTP) is another protocol used in VoIP

Question 109

Which RADIUS implementation was created to deal with Voice over IP (VoIP) and wireless services?

Answer 109

Diameter - It was created to address new technologies that RADIUS was not designed to handle.

Question 110

While designing an IPv6 addressing scheme for your network, you decide to use EUI for the host portion of each node’s address. You need to derive a 64-bit EUI address for the hosts on your network as part of the overall IPv6 address for each node. What should you do?

Answer 110

Use the host’s MAC address with FFFE inserted in the middle, and invert the seventh most significant bit in the MAC address -

Question 111

You need to display protocol statistics and connections using NetBIOS for a Windows computer. Which utility should you use?

Answer 111

Nbtstat - displays NetBIOS over TCP/IP statistics on Windows computers. Use Nbstat to perform the following: Track NetBios over TCP/IP, Show details of incoming and outgoing NetBIOS over TCP/IP connections, Resolve NetBIOS names

Question 112

You have decided to implement frame tagging in a port-based switching network. What does this technique ensure?

Answer 112

That a single VLAN can be distributed across multiple switches

Question 113

Your wireless network has come under attack in recent weeks. A technician suggests that you implement 802.1x security instead of 802.11 WEP security in the wireless network. What is the advantage of using 802.1x security over 802.11 WEP security?

Answer 113

802.1x security generates dynamic encryption keys -

Question 114

You are replacing a SFP fibre cable. You decide to use an SFP+ cable because one is available. The cable fits in the ports, but you lose connectivity. What is the most likely culprit?

Answer 114

Transceiver mismatch - occurs when you have a fibre connector plugged into the wrong type fibre port

Question 115

You need to determine the reliability of a network segment. Which metric would help you?

Answer 115

Error rate - a metric/tool that can be used to indicate the reliability of the network, expressed as a percentage.

Question 116

Your company operates a fleet of panel trucks, each with a built-in cellular base station for voice and data communications. You are required to upgrade the wireless equipment used in 18 vehicles. You do not want to install obsolete equipment. What cellular technology is most likely to be obsolete?

Answer 116

TDMA - Time Division Multiple Access is obsolete. A 2G technology decommissioned in 2007-2009

Question 117

You have recently moved several servers that contain confidential information onto a DMZ. What is the most likely valid reason for doing this?

Answer 117

Compliance with federal and state regulations

Question 118

You have a subnet that contains a computer with the IP address 172.16.5.2/23. You need to send a message to every computer on the network where that computer resides. Which subnet is that IP address a member of, and what is the broadcast address for that subnet?

Answer 118

subnet: 172.16.4.0, broadcast: 172.16.5.255 - The valid host range is between 172.16.4.1 and 172.16.5.254

Question 119

A customer has asked you to deploy a solution based on port numbers that allows multiple computers to share a single IP address. Which addressing technology should you deploy?

Answer 119

PAT - Port Address Translation provides port address translation, this is based on the port numbers. When using PAT you are able to share a single public IP address among multiple computers on the same network

Question 120

Which mitigation technique reduces the attack profile of a device or network?

Answer 120

Role separation - involves dividing server duties amongst two or more servers to reduce an attack profile

Question 121

Which of these devices or functions works at Layer 7? Content filter, VoIP gateway, VoIP PBX, NGFW?

Answer 121

A Next Generation Firewall (NGFW) works at the application layer (Layer 7).

Question 122

You are hired to manage the network at a large data centre. On your first day a user reports that they have lost network connectivity. At the user’s workstation, you successfully ping 127.0.0.1 and then swap out the patch cable that runs from the computer to a blank wall plate. In the network closet you notice that all four patch panels were mounted to the rack after the punchdowns were completed but nothing indicates port assignments or which areas the patch panels serve. You end up resolving the issue but it takes longer than necessary. You want to speed up the resolution of future connectivity issues. What should you prepare FIRST?

Answer 122

Labeling - Patch panel ports should be labeled and wall jackets should be labeled with the corresponding port number on the patch panel. The patch cable should have the same labeling. Switches, routers, hubs and wireless access points should be labeled as well as each piece of equipment in a server rack.

Question 123

You want to configure a firewall and filter packets on a Linux system. Which command would you use?

Answer 123

iptables - filtering can be performed using packet type, packet source/destination or target.

Question 124

You are creating a wireless network for your company. You need to implement a wireless protocol that provides maximum security to protect against wireless attack. However you must provide support for older wireless clients. Which protocol should you choose?

Answer 124

WPA - designed to work with older clients while implementing the 802.11i standard, was created to fix core problems with WEP

Question 125

Your company has a main office and three branch offices throughout the United States. Management has decided to deploy a cloud solution that will allow all offices to connect to the same single-routed network and thereby connect directly to the cloud. Which of the following is the BEST solution? Client-to-site VPN, MPLS VPN, Site-to-site VPN, P2P?

Answer 125

MPLS VPN - Multiprotocol Label Switching Layer 3 Virtual Private Network. This will allow all offices to connect to the same single-routed network and connect directly to the cloud

Question 126

What is the most common form of identification and authentication?

Answer 126

user identification with reusable password

Question 127

Users on your network have access to the internet. As more users access the internet bandwidth starts to diminish causing web pages to load slowly. After looking at the web server logs you noticed that many of the same web sites are being accessed by multiple users. What should you do to improve your company’s internet bandwidth?

Answer 127

Implement a HTTP proxy server - frequently accessed files are placed on the cache of this server

Question 128

You have two wireless networks in your building. The wireless networks do not overlap. Both of them use Wifi Protected Access (WPA). You want to ensure that no unauthorised wireless access points are established. What should you do?

Answer 128

Periodically complete a site survey

Question 129

You need to deploy a fibre distribution panel for datacenter, remote office or local area networking use. Which features are NOT important for such uses?

Answer 129

Support for GBIC connectors, Support for SFP+ - These two options represent connectors used at endpoints, such as routers, switches and network interfaces. NOT connectors or functions present in FDPs themselves. FDPs generally offer Cable termination, Bulkhead adapters and receptacles, Cable splices and Cable storage

Question 130

You need to collect management information on the routers and switches used on your company’s network. You decide to use SNMP. What is the name of the software component that runs on a managed device when you deploy this technology?

Answer 130

SNMP agent - runs on a managed device such as a router or a switch and collects management information.

Question 131

Your organisation has several VLANs implemented on its network. The VLANs operate across several switches. What do all users on a VLAN have in common?

Answer 131

Broadcast Domain - VLAN assignment is configured at the switch for each device that is connected to the device. VLANs enable many users at many locations to be in the same broadcast domain. VLANS span multiple collision domains, subnets and cable segments so users would not have these aspects of the network in common

Question 132

You have installed a new MAU on your token ring network because the old one is no longer supported by the product vendor. At what layer of the OSI model does this device operate?

Answer 132

The Physical Layer - An MAU is a network concentrator used on token ring networks. An MAU is similar to a hub, which is a network connection concentrator used on star-wired ethernet networks.

Question 133

A new user is reporting a “Destination Host Unreachable” message. What is the most likely culprit?

Answer 133

Incorrect Gateway - Make sure the local machine and the default gateway are on the same subnet. If what is entered as the gateway IP address is actually the IP address of the LAN side of your router, you will see a “Request Timed Out” message.

Question 134

You are explaining the TIA/EIA 568A and 568B wiring specifications to a new employee. Which wiring pins contain the same colours across both specifications?

Answer 134

Pin 4, Pin 5, Pin 7, Pin 8

Question 135

Which of the following relies on credentials stored and authenticated on the device being used? Certificates, Local Authentication, Kerberos, RADIUS?

Answer 135

Local Authentication - the credentials are stored on the device being used (local device), not on a remote server. Local authentication is accomplished by the user providing credentials (typically a user name and password) and verifying those credentials against a local database

Question 136

You need to configure IPSec to digitally sign and encapsulate each packet within another packet. What should you implement?

Answer 136

AH protocol in tunnel mode - Internet Protocol Security (IPSec) can be used in tunnel mode with the Authentication Header (AH) protocol to digitally sign and encapsulate each packet sent from the network within another packet. A Tunnel is a network communications construct that transports encapsulated packets.

Question 137

Your company’s security policy states that passwords should never be transmitted in plain text. You need to determine if this policy is being followed. which tool should you use?

Answer 137

protocol analyser - captures packets as they are transmitted on the network. If a password is transmitted in plain text you will be able to see the password in the packet. Also called network analysers or packet sniffers

Question 138

An administrator would like to integrate DNS and DHCP so that each is aware of changes in the other. Which of the following would be the best method for him to do this?

Answer 138

IPAM - IP address Management allows integrations of DNS and DHCP so that each is aware of the changes in the other. IPAM allows for the discovery of servers associated with an IP address infrastructure responsibilities on the network and the ability to manage those servers from a central point

Question 139

What is the purpose of a pointer (PTR) DNS record?

Answer 139

It maps an IP address to a hostname

Question 140

What are the advantages that a spine-and-leaf network architecture has over the traditional three-tiered network architecture?

Answer 140

Lower Latency, Increased capacity, Higher Scalability - Also allows for equal cost multipath (ECPM) instead of spanning tree protocol (STP) to prevent pathways from being oversubscribed while still preventing network loops

Question 141

Your company periodically exchanges confidential information with a third party via a single server at each company. Management has recently become concerned that communications between the two servers have been intercepted and read. You have been asked to ensure that messages between the two authenticated computers are encrypted to prevent attackers from reading the messages. Which protocol should you use?

Answer 141

TLS - Transport Layer Security encrypts the messages transmitted between two authenticated computers, preventing third parties from reading the messages. TLS is the protocol being used when Secure Sockets Layer (SSL) is implemented. TLS works at the transport layer

Question 142

Your company has decided to implement unified communication. You have been asked to implement a VoIP network. You need to connect the VoIP network to your company’s PBX. What should you implement?

Answer 142

UC Gateway - a unified communication (UC) gateway connects VoIP to your private branch exchange (PBX). Unified communications include VoIP, video, real-time services, quality of service (QOS) and UC devices.

Question 143

Which device can be used to divert incoming web traffic to specific servers based on its content?

Answer 143

Load Balancer

Question 144

Your Ipv6 host uses Stateless Address Autoconfiguration (SLAAC). How does it install a default IPv6 route?

Answer 144

Router Advertisement - When a device that uses both IPv4 and IPv6 joins a network, it sends a router solicitation (RS) messuage using ICMP to contact the local IPv6-capable router on the network. The local router is turned into the all-router’s multicast group address which is ff02::2, and will receive the RS message. The router immediately answers with a routing advertisement (RA) message using ICMP to all nodes on the network. This uses the all nodes multicast group address which is ff02::1

Question 145

The company network that you administer has four LANs: accounting, receiving, shipping and development. Each LAN is connected to the other LANs by a router. The user of the computer named LeadDev on the development LAN reports that he cannot connect to a computer named DevServ, which is also on the development LAN. The user of a computer named Shipmaster on the shipping LAN reports that she can connect to the DevServ computer. Which situation is the most likely cause of the connectivity problem? The router is defective, The Shipmaster computer has a faulty NIC, The network cable is disconnected from the NIC on the LeadDev computer, The NIC in the DevServ computer is defective?

Answer 145

The network cable is disconnected from the NIC on the LeadDev computer - Because the Shipmaster computer can connect to the DevServ computer, the communication path between these two computers is functioning normally. This path includes the NIC on the Shipmaster computer, the router between the shipping and development LANs, and the NIC on the DevServ computer.

Question 146

You are designing a SOHO network for your company. You want to use the Ethernet standard that supports a data transmission rate of 1 Gbps over copper cable. Which Ethernet standard should you use on the network?

Answer 146

1000BaseCX - supports a data transmission rate of 1 Gigabit per second over 150-ohm balanced copper cable. Supports a maximum cable segment length of only 25m. Designed to support connections between network nodes that are in close proximity such as nodes in the wiring closet.

Question 147

Your company wants to allows remote users to access their Windows network remotely if their network is not connected to the internet. What should you implement?

Answer 147

RAS - Remote Access Service is a service provided by Windows that allows remote access to the network via a dial-up connection

Question 148

Your company is researching different wireless antennas. Antennas that you research are high-gain antennas. What is a property of high-gain antennas?

Answer 148

High-gain antennas provide a small vertical beamwidth - Antennas with higher gain have less beamwidth than antennas with lower gain. The high-gain antennas have very narrow beamwidth. For example typical 6-dBi patch antenna has a 65-degree beamwidth but the 21-dBi parabolic dish antenna has a 12-degree radiation pattern.

Question 149

Which network device would be MOST likely found within an office building setting? Industrial Control Systems (ICS), SCADA systems, Smart Speakers, HVAC systems?

Answer 149

HVAC systems - can be found in almost all settings due to their universal usage. HVAC systems are designed to handle heating, ventilation and air conditioning within a building.

Question 150

What is another term for a demilitarised zone? (DMZ)

Answer 150

screened subnet - Two firewalls are used in this configuration, one between the public network and DMZ and one between the DMZ and private network.

Question 151

You need to perform some administrative maintenance on a Cisco router. you decide to connect your notebook computer to the console port on the router. Which type of cable should you use?

Answer 151

Rollover cable - You should use a rollover cable (also called a console cable) to connect to the console port on any Cisco device.

Question 152

You have implemented an Ethernet CSMA/CD network for your company. Users complain of delays. When you research the issues you discover that the network has low throughput. what is the most likely cause of delay on this network?

Answer 152

Collisions - Collisions on an Ethernet CSMA/CD network are normal and generally do not cause any negative effect. In fact they are required for proper operation. An excessively high number of collisions occurring for a sustained length of time can cause delays and slow throughput. CSMA/CD will negotiate standoff timers to allows multiple devices to communicate on congested network segments.

Question 153

Your organisation has implemented Kerberos 5 to authenticate its users. A member of management has asked you to explain ticket granting in Kerberos 5. You want to explain all the components of Kerberos to this member of management. Which entity is a ticket that is granted to a client after a client is authenticated?

Answer 153

TGT - Ticket-Granting-Ticket. To ensure tickets expire correctly, clock synchronisation is used in Kerberos authentication. A client is granted a TGT from an Authentication Server (AS) which is sometimes referred to as a ticket granting server (TGS). The client then sends its TGT to a Key Distribution Centre (KDC) and the KDC sends a session key to the client.

Question 154

Employees must use a combination photo identification and security key card to enter a company office building. What is a secure method of determining whether an employee who lost a key card should be allowed to enter the office building?

Answer 154

Place digitised photographs of the employees in employee records

Question 155

You must propose a cabling scheme for your company’s new location. Several departments are located on the same floor with a maximum distance of 61m between departments. You want a relatively easy, low-cost installation with simple connections. Which type of cabling would you propose?

Answer 155

Twisted-Pair - the least expensive cabling media. Mass produced and widely available. Max length of 100m

Question 156

You have several computers in your network that are located behind a firewall. The computers are unable to obtain a dynamic IP address from the DHCP server. You suspect that the firewall is configured to block the DHCP traffic. which port must be open on the firewall to allow the traffic?

Answer 156

UDP port 67 - Dynamic Host Configuration Protocol transmits dynamic IP address assignment, it is considered a connectionless protocol.

Question 157

While working as an IT technician you receive multiple complaints of network outages occurring. After investigating you conclude that there are incomplete files resulting in mismatching data values. what type of interface error has occurred here?

Answer 157

A CRC error - A cyclic redundancy check error occurs when a damaged or incomplete file causes the checksum value not to match the CRC value. These errors often occur when compressed files or archives are extracted but can also occur when reading and writing to local and external hard disks or other external media. The purpose of CRC is that it will check files and other data sites to ensure that there have been no changes to any raw data.

Question 158

You manage a network for your organisation. The network contains one DNS server and three routers. you are setting up a new DHCP server. You configure seperate scopes for each subnet on your network. The routers are configured to forward DHCP requests. You need to ensure that DHCP clients receive the appropriate settings using the least administrative effort. What else should you do? (2 answers)

Answer 158

Configure the DNS server as a server option, Configure each router as a scope option for its appropriate scope - each scope will have a different router or default gateway. For this reason router or default gateway information must be configured at the scope level. If you configure this option at the server level all the clients would receive the same router configuration, which would not work because you have three different subnets.

Question 159

Your company owns a single physical server. You need to ensure that Web services are hosted in a Linux environment while Active Directory services are hosted in a Windows environment. In addition you need to ensure that these services are hosted on different broadcast domains. What should you do?

Answer 159

Implement virtual servers and switches - allows you to host a Linux environment for Web services and a Windows environment for Active Directory services on the same physical server. Implementing virtual switches will allows you to host the services on a different broadcast domains.

Question 160

You have two Web servers, named WebSrv1 and WebSrv2. You need to configure the Web servers so that they share the web request load equally. What should you do?

Answer 160

Implement an active/active cluster - also known as a load-balancing cluster.

Question 161

What is a physical barrier that acts as the first line of defense against an intruder?

Answer 161

A fence - Fencing acts as the first line of defense against casual trespassers and potential intruders, but fencing should be complimented with other physical security controls such as guards and dogs to maintain the security of the facility

Question 162

You have changed the IP address scheme for two of your company’s networks. In addition the names of two servers have changed. Which change management documentation should you revise?

Answer 162

Physical Network Diagram - includes cable lengths and types, IP addresses, server roles, network equipment locations and number of network users. LOGICAL NETWORK DIAGRAMS DO NOT INCLUDE SERVER NAMES AND IP ADDRESSES

Question 163

You need to provide terminal emulation and remote login capability for one of the servers on your network. Which process/application layer protocol should you use?

Answer 163

Telnet - is a user command and an underlying TCP/IP protocol for accessing remote hosts.

Question 164

You have decided to implement frame tagging in a port-based switching network. What does this technique ensure?

Answer 164

That a single VLAN can be distributed across multiple switches

Question 165

You are investigating possible unauthorised access to a Windows Server 2008 computer. The first step in your company’s investigation policy states that the current network connections must be documented. Which command should you use?

Answer 165

netstat - displays incoming and outgoing connections, routing tables and network interface statistics

Question 166

You need to assign a virtual IP address to an internet server. What are valid reasons for doing so? (3 answers)

Answer 166

• To permit multiple servers to share the same address
• To eliminate host dependencies on specific, individual network interfaces
• To permit the same address to access multiple domain names

Question 167

What requires a user to complete an action, such as digitally signing an AUP, prior to accessing the network?

Answer 167

Captive Portal - Captive portals are web pages, typically used in public networks, where users must complete some action before that are granted access to the network. Commonly seen in coffee shops, hotels and airports

Question 168

You have decided to implement ISAKMP. What is provided by this technology?

Answer 168

A protocol that works with IPSec to establish a secure connection - Internet Security Association and Key Management Protocol

Question 169

Which DNS record type includes SPF and DKIM records?

Answer 169

TXT - contains human readable text and are designed to help with fraudulent phising emails. The Sender Policy Framework (SPF) record within the TXT record helps filter out emails that are spoofed to appear as if they are coming from your domain. SPF looks at the IP address of the last SMTP server and verifies that the IP address and SMTP server match. Domain Keys Identified Mail (DKIM) validates that an email sent from a domain was authorised by the owner of the domain.

Question 170

Which is a security implication if your company uses a public cloud deployment?

Answer 170

Other tenants can gain physical access to the resources that store your company’s data

Question 171

Your network contains a DHCP server. While performaing routine maintenance you discover that the DHCP server has the following types of options configured: server options, scope options, reserved client options and class options. which of these types of options takes precedence?

Answer 171

Reserved client options -

Question 172

You need to solve a traffic problem occurring on a large Ethernet network. Within this large segment the accounting department is flooding the network with a high volume of data which causes the entire network to slow down. Which device is a quick and low-cost solution to isolating the accounting department?

Answer 172

Bridge - provides a quick and low-cost solution for dividing a network into different segments for the purposes of reducing network traffic. Bridges work by building routing tables based on MAC addresses. These routing tables enable bridges to determine which packets need to pass through the bridge to another segment, versus which packets should stay on the local segment.

Question 173

You need to define which protocols are allowed to traverse the router, whether the traffic is inbound or outbound, Which should you use? Distributed switching, Access control lists, Packet switching, Software-defined networking?

Answer 173

Access control lists - An access control lists (ACL) allows you to define which types of traffic are allowed into or out of the network on a protocol-by-protocol basis. ACLs can also be configured based on port number, MAC address, IP address and other crtiteria.

Question 174

You originally configured a redundant server with a static IP address and it has been offline for some time. When you power the server up to perform some tests what might be an unexpected consequence?

Answer 174

Duplicate IP addresses

Question 175

You need to implement a data centre for your company. In this data centre you plan to implement inter-rack connections that are limited to 25m. Which Ethernet standard should you implement?

Answer 175

1000Base-CX - designed for wiring closets, transmission rate of 1000Mbps and maximum segment length of 25m

Question 176

Which feature provides varying levels of network bandwidth based on the traffic type?

Answer 176

QoS - Quality of Service

Question 177

The owner of a coffee shop wants you to install a wireless network for employees and customers to increase the shop’s business. He is not tech-savvy and cannot understand why you want to change a WEP setting, even though you tell him it is not secure enough. What feature of WEP can you explain in lay terms that will help him understand?

Answer 177

Shared or open authentication - were the two insecure methods of authentication under WEP. Under Shared Key Authentication (SKA) all of the clients used the same key, making the key very vulnerable to being cracked. Like giving everyone a set of keys to the business
- An open wireless network does not require any form of authentication key which is like leaving the front door open

Question 178

What are three characteristics of a client-server network?

Answer 178

• More stable and secure connections
• Lengthy access time for a service
• Less expensive network hardware

Question 179

An administrator would like to integrate DNS and DHCP so that each is aware of changes in the other. Which would be the best method for him to do this?

Answer 179

IPAM - IP Address Management allows integration of DNS and DHCP. IPAM allows for the discovery of servers associated with an IP address infrastructure responsibilities on the network and the ability to manage those servers from a central point.

Question 180

Which malicious software relies on other applications to execute and infect the system?

Answer 180

A virus - The main criterion for classifying a piece of executable code as a virus is whether it spreads itself by means of hosts. The host could be any application or file on the system. A virus infects a system by replicating itself through application hosts. Viruses usually include a replication mechanism and an activation mechanism designed with a particular objective in mind. Viruses usually spread via infected disks, through email or via infected programs

Question 181

Your company wants to use the private Class B network designation of 172.17.0.0/20. You have been asked to divide it up into six subnets. Two subnets should have 512 nodes and four more subnets have 256 nodes already established. While a total of 2,048 IP addresses are needed the design should leave some room for growth in each subnet. What is the correct way to subnet this network?

Answer 181

Allocate two networks with /22 masks, and the remaining four with /23 masks

Question 181

You are explaining the TIA/EIA 568A and 568B wiring specifications to a new employee. Which wiring pins contain the same colours across both specifications?

Answer 181

Pin 4, Pin 5, Pin 7, Pin 8

Question 182

What is the main purpose of a VPN concentrator?

Answer 182

To terminate the VPN tunnels

Question 183

You have been hired as a new network administrator for your company. In your first week you discover a device that uses a security policy to filter and examine packets coming into a network to determine whether to forward the packet to its destination. This device is not depicted on the company’s network layout diagram. Which device is this?

Answer 183

Firewall - uses security policies

Question 184

You will have a very small wiring closet for your routers. While the company will use fibre-optic cabling, you would like to use the smallest form of connector to conserve space. The connector you plan to use should be roughly half the size of the other connectors. Which fibre-optic connector should you use?

Answer 184

LC - A Lucent Connector fibre-optic connector is roughly half the size of the other fibre-optic connectors. Its smaller form allows for more space in the wiring closet.

Question 185

Users are reporting internet connectivity issues. After researching you discover that the routing protocols in use on your network are experiencing routing loops. You must prevent this from happening. What should you do?

Answer 185

Implement split horizon - Split horizon route advertisement prevents routing loops in distance-vector routing protocols by prohibiting a router from advertising a route back onto the interface from which it was learned

Question 186

You have been asked to create several TIA/EIA 568A wiring cables for your network. Which colour wire should be placed in Pin 1?

Answer 186

Green/White

Question 187

You have decided to implement 802.1q. What does this standard do?

Answer 187

It implements VLAN Trunking - It allows traffic from all VLAN to cross a single cable between two switches. If 802.1q was not implemented each seperate VLAN would require its own port connection

Question 188

You want to allow remote users to access their Windows network remotely if their network is not connected to the internet. Which of the following should you implement?

Answer 188

RAS - Remote Access Service is a service provided by Windows that allows remote access to the network via dial-up connection. In order to obtain a remote connection two services need to be in place: RAS and dial-up networking (DUN). The server that will establish the remote connection needs to have RAS so that it can link to the remote computer. The remote computer needs to have DUN so that it can connect to the remote server.

Question 189

You have been asked to research the different firewall types and make recommendations on which type(s) to implement on your company’s network. You need to document how the firewalls affect network performance. which type of firewall most detrimentally affects network performance?

Answer 189

Application-level proxy firewall - it requires more processing per packet.

Question 190

You are the network administrator for your company. You are in the process of verifying the configuration of the network devices to ensure smooth network connectivity. You want information on the routes taken by packets from a CISCO router so that you are able to identify the network points where packets are being dropped. Which command should you use to accomplish this task in the most efficient manner?

Answer 190

traceroute - finds the path a packet takes while being transmitted to a remote destination. Also used to track down routing loops or errors in a network

Question 191

You need to support an online meeting application that primarily transports streaming video packets. Occasional dropped packets are less important than minimising latency. Which transport layer protocols should you deploy?

Answer 191

DTLS - Datagram Transport Layer Security is essentially a reimplementation of TLS which uses order-preserving TCP at the transport layer. DTLS uses the UDP protocol at the transport layer instead of TCP

Question 192

Which metric is used by the Routing Information Protocol (RIP) Version 2 to determine the network path?

Answer 192

Hop Count

Question 193

After a data breach occurs at a clients site, you determine that some of the switches, routers and servers in the network were updated with the most current security patches, and some have never been updated. When you examine the network diagram you notice that many of the same types of devices do not look the same in the diagram. What type of documentation should you provide to the client to ensure all devices are consistently identified by their type?

Answer 193

Diagram symbols - should be standardised throughout the documentation

Question 194

You suspect there is a problem with addressing that allows data to be sent throughout your network. Which addressing method is used at the OSI network layer to allow this?

Answer 194

Logical Network Addressing

Question 195

Management has decided to implement a diversity antenna system at its main headquarters. What is the advantage of using this system?

Answer 195

A diversity antenna system avoids multipath distortion

Question 196

To improve your ability to monitor and manage your network devices your network requirements call for purchasing devices that support out-of-band (OOB) management. Which type of interface or device is most likely to satisfy this requirement as you select switches, routers, firewalls and servers for purchase?

Answer 196

Serial Port - A serial port easily and regularly plays host to a modem which provides a dial-up link that network admins can use to access the device to which it is attached. The whole idea of OOB is to use a seperate communications link outside the scope and reach of the regular network. An OOB link provides a way to access a device even when the network is down or when the device needs to be powered up after a power fault or interruption.

Question 197

Management has requested that you document the minimum level of security for all network devices. Which of the following will this provide?

Answer 197

Baselines

Question 198

Your company is considering converting to the use of IPv6 addresses.. What are the three types of IPv6 addresses?

Answer 198

Anycast, Unicast, Multicast

Question 199

What provides both authentication and authorisation using UDP?

Answer 199

RADIUS - Remote Authentication Dial-in User Service was originally designed for dial-up networking and validates the credentials of a remote user against a stored database

Question 200

Your company has decided to implement an acceptable use policy (AUP) that must be distributed to all users. You have been asked to write the preliminary policy to submit for management approval. What is defined in this policy?

Answer 200

How users are allowed to employ company hardware

Question 201

You have been given a drawing that shows the flow of communication in your network, with symbols to indicate each piece of equipments function. Which configuration management documentation have you been given?

Answer 201

Physical Network Diagram - includes flow of network communication and symbols to indicate equipment function. Uses connecting line to show the physical layout of the devices in the network

Question 202

Which system or device detects network intrusion attempts and controls access to the networks for the intruders?

Answer 202

IPS - Intrusion Prevention System is an improvement over an intrusion detection system (IDS) because an IPS actually prevents intrusion

Question 203

You have been asked to implement a VoIP on your company’s network. Which protocol should you use?

Answer 203

SIP - Session Initiation Protocol, application layer protocol, allows you to transmit audio and video messages over a TCP/IP network

Question 204

You have been hired as a network consultant by a company. You discover that the network’s signal strength greatly weakens as traffic travels over the network medium due to absorption and scattering. What is the term for this tendency?

Answer 204

Attenuation - the term for a loss of signal strength as data travels over the network medium, also referred to as decibel (dB) loss

Question 205

Your company’s networking team wants to deploy 10-Gigabit Ethernet (10GbE or 10 Gbps Ethernet) over fibre optic cables for its core or backbone network segments. Which of the following types of transceivers are they most likely to plug directly into their switches, routers and server network adapters?

Answer 205

SFP+

Question 206

You are working with a company that has a fast ethernet 100Base-TX network. You will be adding several new network segments to the current network. Which standards apply to this company’s network?

Answer 206

• Two pairs of wires with a Cat5 UTP cabling
• 100Mbps data transmission rate
• Maximum segment length of 100m

Question 207

Your company consists of 75 employees. Your company has entered into a partnership with another company that is located across the country. For meetings while working out the partnership agreement your company’s 6 top-level executives must be able to connect to the partner’s network quickly and reliably. Support for voice, data and imaging transmissions and a dedicated 24 hr link are required. your solution must be as inexpensive as possible while providing enough bandwidth for your company’s top-level executives. What should you implement?

Answer 207

T1 - T1 lines can provide fast, digital connections of up to 1.544 Mbps, transmitting voice, data and video. A T1 line also provides a dedicated connection which means that it provides a 24hr link. A T1 line is more expensive that a dial-up connection using Plain Old Telephone Service (POTS) or an Integrated Services Digital Network (ISDN) connection but this company needs enough bandwidth to accomodate 6 executives which justifies the cost. If the full bandwidth of the T1 line proves too costly or unnecessary, fractional T1 is available. With fractional T1 you can subscribe to one or more of the channels at a lower cost

Question 208

Which media-access method does the 802.11 standard specify for wireless networks?

Answer 208

CSMA/CA - Carrier Sense Multiple Access/Collision Avoidance (like CSMA/CD for ethernet)

Question 209

Which RADIUS implementation was created to deal with VoIP and wireless services?

Answer 209

Diameter

Question 210

You need to implement a wireless network for a client. You have two 802.11a, two 802.11b and two 802.11g wireless access points. You need to implement three wireless networks that can communicate with each other. Which wireless access points should you use?

Answer 210

The 802.11b and 802.11g wireless access points - These two standards operate at the 2.4Ghz frequency and can be used interchangeably

Question 211

You have an 802.11g wireless network that uses a single wireless access point. For security purposes, you do not broadcast the SSID. You have noticed wireless latency issues on your wireless network. What should you do to fix the issue?

Answer 211

Install another wireless access point that uses a different non-overlapping channel and the same SSID

Question 212

Which technology or device would be best suited for implementing short-ranged fibre-optics?

Answer 212

CWDM - Coarse wavelength Division Multiplexing (CWDM) is a WDM system best for short-ranged fibre-optic transmission because it uses fewer than 8 active wavelengths per fibre. Employs wide-range frequencies with wavelengths that are far apart. CWDM is a compact and cost-effective option when spectral efficiency is not a requirement. (DWDM for long range, 6 wavelengths)

Question 213

You are troubleshooting a computer that has the IP address of 192.22.14.42. To which network class does the IP belong?

Answer 213

Class C - Class C addresses range from 192 to 223 decimal
[
Class A - 0 -126
Class B - 128-191
Class C - 192 -223
Class D - 224 - 239
Class E - 240 - 255
]

Question 214

You need to create an encrypted remote terminal connection with a UNIX computer. Which protocol should you use?

Answer 214

SSH - Secure Shell is used to create an encrypted remote terminal connection with a UNIX computer, secure alternative to Telnet

Question 215

You want to enable port authentication on your network switches. On which setting is port authentication based?

Answer 215

Port authentication on your network switches is based on the switch’s MAC address. If the switch is not configured with a MAC address the MAC address communication is not allowed through the switch port.

Question 216

Your company’s IT department needs to provide field engineers with remote GUI-based access to their in-office desktop PCs over the internet. Engineers could use Windows, Linux, iOS and Android on their remote devices with a mix of MacOS and Windows on the in-office desktops. Which remote access tools offer the best no-cost option?

Answer 216

VNC - Virtual Network Computing products are widely and freely available for Windows, OS X, Linux, Android, iOS and Chrome. Many VNC products are easy to set up and use, interoperate among multiple versions and work well through corporate and personal firewalls. Best no-cost option

Question 217

Name three characteristics of a client-server network

Answer 217

• More stable and secure connections
• Less expensive network hardware
• Lengthy access time for a service

Question 218

you need to determine the length of a network cable. Which device should you use?

Answer 218

a TDR - Time Domain Reflectometer. Sends an electric pulse through a cable and measures the time required for the pulse to return

Question 219

Currently your company uses IPv4 across its enterprise. Your company is considering using IPv6 instead of IPv4. Which improvements does IPv6 provide over IPv4?

Answer 219

• The IP header options allow more efficient forwarding and less rigid length limits
• Some header fields have been dropped or made optional

Question 220

You need to implement an independent network within your private LAN. Only users in the research and development department should be able to access the independent network. The solution must be hardware based. Which type of network should you deploy?

Answer 220

A Virtual Local Area Network (VLAN) can be used to ensure that internal access to other parts of the network is controlled and restricted. Created using a switch. VLANs provide a layer of protection against sniffers and can also decrease broadcast traffic. Creating a VLAN is much simpler than using firewalls or implementing a virtual private network (VPN)

Question 221

You are investigating possible unauthorised access to a Windows Server 2008 computer. The first step in your company’s investigation policy states that the current network connections must be documented. Which command should you use?

Answer 221

netstat - displays incoming and outgoing connections, routing tables and network interface statistics

Question 222

You have installed a new MAU on your Token Ring network because the old one is no longer supported by the product vendor. At what layer of the OSI model does this device operate?

Answer 222

Multistation Access Unit operates at the Physical layer (Layer 1). An MAU is a network connection concentrator used on star-wired Ethernet networks

Question 223

Your company wants to upgrade its twister pair (TP) cable network to handle up to 10GB data rates from switches to network nodes over lengths of up to 90m. Which TP category type must the company deploy to meet its requirements?

Answer 223

Cat6a makes better use of conductors and shielding to support the nominal 100m distances for data up to 10Gbps.

Question 224

For your current deployment you need an antenna with 360 degrees radiation in the horizontal plane to use for point-to-multipoint WLAN deployment. Which type of antenna should you deploy?

Answer 224

Omnidirectional antenna

Question 225

You are documenting the network layout for your company. You have discovered a firewall that has two network interfaces. Which firewall architecture have you discovered?

Answer 225

Dual-Homed Firewall - One interface connects to the public network the other to the private network

Question 226

You are installing a second wireless access point in your office. When you place the second wireless access point you notice it is experiencing interference intermittently. You want to prevent the interference. What are three methods to prevent interference?

Answer 226

• Move the new wireless access point
• Change the channel used on the new wireless access point
• Decrease the signal strength of the new wireless access point

Question 227

What provides the communication framework for data transfer in a storage area network (SAN) while minimising costs?

Answer 227

iSCSI - Internet Small Computer Systems Interface protocol is used in SANs, LANs, WANs and the internet. Allows SCSI commands to transmit over an IP network

Question 228

Which device or feature provides a bridge between the physical environment and the virtual environment?

Answer 228

Virtual NIC

Question 229

You are asked to acquire address space for a new network that must accomodate at least 12 subnets each with at least 2,048 nodes. A total of 25,576 IP addresses are needed but the available address space should leave some room for growth in each subnet, and for the number of subnets to double (or more). The network must also support IPsec to the endpoints for security reasons. Which option provides the best fit while minimising costs?

Answer 229

IPv6 network with a /56 global routing prefix - little or no cost to obtain, provides 256 subnets each with millions of nodes and supports IPsec end to end. In a situation where IPsec is needed end-to-end only IPv6 makes sense

Question 230

You are implementing an 802.11g wireless network in your office. What is the maximum number of wireless access points that you can implement within 30m of each other?

Answer 230

Three - The 802.11g wireless access points only have three non-overlapping channels 1, 6, 11

Question 231

Which technology is widely used in home automation, such as smart lights, locks and thermostats?

Answer 231

Z-Wave - A wireless technology that creates a wireless mesh network with a primary controller. Each device communicates with its nearest neighbour much like routers communicate with each other.

Question 232

Your company is located in Atlanta, Georgia. Management has decided to deploy multiple 802.11b WLANs. You are concerned that there are not enough non-overlapping channels to support the number of access points that you need to deploy. How many non-overlapping channels are supported in this deployment?

Answer 232

Three - 1, 6, 11

Question 233

You are about to install wireless access points in different areas of the building. You want maximum coverage so you opt for the longer-range 2.4 Ghz frequency. What should also be of concern?

Answer 233

Channel Overlap - Can cause performance issues. 11 channels are available in US but there is a high degree of overlap.

Question 234

Your company uses a single global IP address that maps to the company’s local IP addresses. When requests are sent from the internal network to destinations outside the company, those requests are mapped from the IP address of the local host that made the request to the global IP address. Which term describes this process?

Answer 234

Network Address Translation (NAT)

Question 235

You have been hired as a network administrator. The company wants to implement a 10 Gigabit Ethernet designation for use with SONET network. Which of the following should you implement?

Answer 235

10GBase-SW - for use with Synchronous Optical Networking (SONET) networks.

Question 236

In PKI what is the entity that signs a certificate?

Answer 236

An Issuer - Signing a certificate verifies that the name and key in the certificate are valid. PKI is a system designed to securely distribute public keys. PKI typically consists of the following: certificates, a key repository, a method for revoking certificates and a method to evaluate a certificate chain

Question 237

Which of the following can be manipulated to reduce network traffic? lower TTL, NTP, increased lease time, MAC reservations?

Answer 237

Lease time can be manipulated to reduce network traffic. Lease time for Windows is 8 days but lease times may be adjusted. If the network configuration seldom changes you might consider increasing the lease time. Every lease must be renewed and those renewals increase network traffic

Question 238

What are three advantages that a spine-and-leaf network architecture has over the traditional three-tiered network architecture?

Answer 238

• Higher scalability
• Increased capacity
• Lower latency